-
Discovered:
- April 9, 2009
-
Updated:
- April 13, 2009 9:03:35 PM
-
Also Known As:
- WORM_DOWNAD.E [Trend]
-
Type:
- Worm
-
Infection Length:
- 119,296 bytes
-
Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP
-
CVE References:
-
CVE-2008-4250
Antivirus Protection Dates
-
Initial Rapid Release version April 9, 2009 revision 009
-
Latest Rapid Release version September 28, 2010 revision 054
-
Initial Daily Certified version April 9, 2009 revision 009
-
Latest Daily Certified version September 28, 2010 revision 036
-
Initial Weekly Certified release date April 15, 2009
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: 0 - 49
-
Number of Sites: 0 - 2
-
Geographical Distribution: Low
-
Threat Containment: Easy
-
Removal: Easy
Distribution
-
Distribution Level: Medium
-
Target of Infection: Spreads by exploiting the Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerability.
Writeup By: Kachun Leung, Yana Liu and Sean Kiernan
